Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333530613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: n0qds1hbw9nCGP4CnXnegSW0v/ycs7U1wy+gq4NWlW8=
Subject key identifier: 7A:9C:50:BD:40:38:2E:3F:E6:CD:B5:39:AD:C7:9D:6E:45:BA:73:95
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3B69F725E92CE1D5662C55DE022D022D3DBCA60C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530613a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:26:09 +0000
ROA not before: Fri 20 Jun 2025 06:21:09 +0000
ROA not after: Fri 19 Jun 2026 06:26:09 +0000
asID: 16909
IP address blocks: 2a14:7581:350a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:69:f7:25:e9:2c:e1:d5:66:2c:55:de:02:2d:02:2d:3d:bc:a6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:21:09 2025 GMT
Not After : Jun 19 06:26:09 2026 GMT
Subject: CN=7A9C50BD40382E3FE6CDB539ADC79D6E45BA7395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:a8:bd:f6:c7:68:12:24:b2:df:f8:de:29:
60:63:d2:19:b2:93:d2:05:ff:fe:1f:a9:82:60:07:
16:25:5f:2f:9e:ea:b5:9d:bf:b5:cf:fd:72:a7:d0:
7d:55:b8:ac:5f:ea:ea:82:3f:01:61:f0:a6:5d:6d:
a6:68:85:24:5d:ba:9c:a2:0a:a0:6c:2c:66:1b:52:
4b:8f:85:f0:26:3d:6b:a7:6d:bf:47:90:19:8e:ab:
fc:fd:26:f5:81:ab:41:be:07:21:10:f3:84:71:44:
25:1c:4a:38:79:b2:72:16:fc:f9:78:cf:8d:18:19:
d2:9c:96:19:e4:82:2a:1b:d3:c5:5e:90:a2:5e:ff:
6a:47:1d:62:00:58:dd:05:23:3f:d5:76:0a:ac:66:
23:65:99:0f:6c:7c:51:33:31:d7:6b:3f:01:a8:d1:
d7:12:a7:59:14:be:84:8a:46:94:ed:78:dd:72:de:
39:23:b6:39:d1:26:16:a3:c2:85:bd:37:ae:d8:ab:
89:ee:b3:5b:5d:5c:e4:66:e3:93:44:9c:61:70:b0:
3d:9c:10:d9:a0:53:71:53:65:2f:01:a0:35:78:94:
42:bc:93:ec:60:11:17:4a:8f:84:86:01:6d:0b:05:
f3:c6:de:17:ae:5f:42:4a:0b:3b:4d:18:2a:95:15:
dd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9C:50:BD:40:38:2E:3F:E6:CD:B5:39:AD:C7:9D:6E:45:BA:73:95
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:350a::/48
Signature Algorithm: sha256WithRSAEncryption
73:e4:72:fd:98:66:5c:38:33:15:1e:9a:bb:cc:25:e8:d6:c3:
e2:24:cc:a9:da:b9:ed:ac:7f:bc:8c:66:61:8d:09:5e:d0:da:
de:d0:54:9c:36:0d:10:a1:51:e1:91:60:a5:bc:a6:32:58:5a:
a6:38:64:b0:f4:b9:7b:dc:ed:11:86:57:c6:cb:47:b5:cd:64:
bd:6d:68:65:d7:1e:d9:29:75:dd:a4:6e:31:67:e1:1b:b5:bf:
bd:7c:72:a9:16:05:39:53:b2:3f:63:49:14:c3:f2:6f:10:90:
a1:85:d4:66:88:9d:92:2b:fc:97:9c:f2:30:fc:9b:75:80:9f:
3d:1b:db:80:f8:2d:d3:45:3e:f6:a1:78:3f:66:66:34:00:b4:
42:8c:fd:21:d9:df:75:90:43:54:77:33:e4:48:35:fc:b8:9b:
55:99:f1:b5:4e:51:0f:b3:51:3f:2f:0b:7b:a9:fc:0f:58:fa:
4b:e9:19:83:4d:1f:89:f3:73:83:8a:4e:dc:49:a4:5a:c2:a6:
87:67:8f:ac:80:02:77:86:bc:fe:48:aa:1e:16:47:56:3f:fe:
81:ce:31:bc:bc:68:02:ce:f4:4b:42:9c:87:3d:9e:74:f5:11:
41:16:a9:16:69:3c:1e:5f:96:46:0c:e6:76:86:df:97:4b:24:
69:7b:54:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:35 2025 by rpki-client